$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa File: cd939959-f7a9-375a-86a0-c699a51f7975.roa (raw, json) Hash identifier: Ik7uRws2uESMrSFid/WrdmIhGrmmlRwckCJkcJO4sdw= Subject key identifier: 62:F0:28:71:6D:3C:86:2F:35:50:6D:36:D6:F2:B6:45:39:3D:24:AE Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584F35E7CB0CA55896E20B4E0600 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 21947 IP address blocks: 199.195.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:cb:0c:a5:58:96:e2:0b:4e:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=72e70543-5419-41d4-b18d-085748d86d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:63:3e:e4:f5:34:22:de:92:bd:36:83:59:41: 90:cc:1d:97:4b:58:0f:ab:ee:e1:5e:40:ad:23:3b: e8:06:59:49:9f:8b:20:67:c1:44:4d:65:05:78:cb: ba:cd:5e:d2:a9:9e:29:e9:d4:80:3f:97:bd:07:29: 5a:61:7b:fe:65:49:9e:a3:df:5c:7b:f5:37:cd:f9: eb:bd:22:b0:3f:8f:57:d7:7d:53:7d:2c:48:fe:c2: fc:33:59:31:50:f6:3e:26:41:de:0b:c6:db:96:a4: e2:ec:c0:37:92:d0:95:db:6d:d1:60:0b:87:75:55: dd:a4:6c:69:ea:b3:4b:18:02:07:79:66:ca:61:0b: d1:e8:a6:39:04:72:cc:d6:e5:ec:cc:87:ff:5b:e8: 00:4b:60:95:d8:6c:a3:2b:61:51:00:0c:fa:5c:26: 72:05:81:cd:30:b7:87:71:62:8e:a5:f3:ea:5b:dc: 9c:76:42:30:8e:c3:e9:7b:64:5c:9b:de:52:ed:83: 99:7a:bc:29:0c:54:3b:d3:09:1d:d0:7a:32:85:13: fb:95:01:1c:87:fb:ca:17:71:45:bf:65:55:58:69: f0:09:72:91:6b:d2:1a:45:ec:b9:c1:6b:55:c5:5a: 25:22:15:e9:7c:9e:0e:8a:e8:10:fa:56:14:54:9d: 1e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F0:28:71:6D:3C:86:2F:35:50:6D:36:D6:F2:B6:45:39:3D:24:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 199.195.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f0:e6:bc:f2:69:e9:4a:da:5d:5c:05:4d:7f:4a:4b:79:25: 56:38:9a:a0:a1:23:bd:e6:d6:ee:db:60:32:15:f8:3e:18:a2: cd:9f:40:9a:e0:64:60:f8:cf:2c:8c:71:4f:5b:64:2c:e7:8c: c6:e9:14:c7:e0:a1:e7:73:6d:ae:b6:63:54:c1:0a:90:a6:b5: 04:28:8c:e4:6c:b8:3f:a5:e1:88:a0:76:e6:18:9f:bb:3a:49: 27:e3:e7:e4:ca:dc:ce:cd:45:d2:9e:f6:a9:42:df:e5:68:8a: 08:d0:c1:21:23:4a:64:d1:4f:ce:46:61:19:6f:20:e5:bb:21: c0:66:6a:7b:11:15:7e:a3:44:2b:9d:2b:22:53:f9:2d:d0:07: 10:3e:91:96:5e:3a:c5:b9:f7:89:0d:d2:07:ce:9e:f6:7d:69: 07:0d:f4:c6:1f:0a:c6:40:b1:02:2f:d3:de:1d:80:c6:89:83: 43:ef:23:98:58:38:74:b2:85:7a:c7:3f:c6:d1:c7:e9:60:5b: 01:82:b1:e3:72:30:92:12:94:e0:47:63:9d:4a:1e:b4:e3:04: b1:0d:f2:2c:e0:5e:5d:7a:1d:15:69:29:ef:95:7b:ac:1b:e9: e9:e0:be:20:d0:e3:bf:fb:39:a1:4b:8d:56:a6:72:db:fa:1c: b5:ac:94:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158sMpViW4gtOBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk NzJlNzA1NDMtNTQxOS00MWQ0LWIxOGQtMDg1NzQ4ZDg2ZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mM+5PU0It6SvTaDWUGQzB2XS1gPq+7hXkCt IzvoBllJn4sgZ8FETWUFeMu6zV7SqZ4p6dSAP5e9BylaYXv+ZUmeo99ce/U3zfnr vSKwP49X131TfSxI/sL8M1kxUPY+JkHeC8bblqTi7MA3ktCV223RYAuHdVXdpGxp 6rNLGAIHeWbKYQvR6KY5BHLM1uXszIf/W+gAS2CV2GyjK2FRAAz6XCZyBYHNMLeH cWKOpfPqW9ycdkIwjsPpe2Rcm95S7YOZerwpDFQ70wkd0HoyhRP7lQEch/vKF3FF v2VVWGnwCXKRa9IaRey5wWtVxVolIhXpfJ4OiugQ+lYUVJ0eMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLwKHFtPIYvNVBtNtbytkU5PSSuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvY2Q5Mzk5NTktZjdhOS0z NzVhLTg2YTAtYzY5OWE1MWY3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPw5rzyaelK2l1cBU1/Skt5JVY4mqChI73m1u7bYDIV+D4Yos2fQJrg ZGD4zyyMcU9bZCznjMbpFMfgoedzba62Y1TBCpCmtQQojORsuD+l4YigduYYn7s6 SSfj5+TK3M7NRdKe9qlC3+VoigjQwSEjSmTRT85GYRlvIOW7IcBmansRFX6jRCud KyJT+S3QBxA+kZZeOsW594kN0gfOnvZ9aQcN9MYfCsZAsQIv094dgMaJg0PvI5hY OHSyhXrHP8bRx+lgWwGCseNyMJISlOBHY51KHrTjBLEN8izgXl16HRVpKe+Ve6wb 6engviDQ47/7OaFLjVamctv6HLWslNI= -----END CERTIFICATE-----Generated at Sat Sep 26 18:55:48 2026 by rpki-client